1. Data Management Information Management Knowledge Management Data and Applications Security Challenges Bhavani Thuraisingham October 2006

2. 2 Developments in Database and Applications Security: 1975 - Present l Access Control for Systems R and Ingres (mid 1970s) l Multilevel secure database systems (1980 – present) - Relational database systems: research prototypes and products; Distributed database systems: research prototypes and some operational systems; Object data systems; Inference problem and deductive database system; Transactions l Recent developments in Secure Data Management (1996 – Present) - Secure data warehousing, Role-based access control (RBAC); E- commerce; XML security and Secure Semantic Web; Data mining for intrusion detection and national security; Privacy; Dependable data management; Secure knowledge management and collaboration

3. 3 Layered Architecture for Dependable Semantic Web 0 XML, XML Schemas Rules/Query Logic, Proof and Trust TRUSTTRUST Other Services RDF, Ontologies URI, UNICODE PRIVACYPRIVACY 0 Adapted from Tim Berners Lee’s description of the Semantic Web

4. 4 Building Dependable Systems Technology provided by the project Hardware Display Processor & Refresh Channels Consoles (14) Navigation Sensors Data Links Data Analysis Programming Group (DAPG) Future App Future App Future App Multi-Sensor Tracks Sensor Detections MSI App Data Mgmt. Data Xchg. Infrastructure Services Security being considered after the system has been designed and prototypes implemented Challenge: Integrating real-time processing, security and fault tolerance Real-time Operating System

5. 5 Need for Geospatial Semantic Web Data Source A Data Source B Data Source C SECURITY/ QUALITY * Semantic Metadata Extraction * Decision Centric Fusion * Geospatial data interoperability through web services * Geospatial data mining * Tools for Analysts

6. 6 Assured Information Sharing Export Data/Policy Component Data/Policy for Agency A Data/Policy for Coalition Export Data/Policy Component Data/Policy for Agency C Component Data/Policy for Agency B Export Data/Policy

7. 7 Data Mining as a Threat to Privacy l Data mining gives us “facts” that are not obvious to human analysts of the data l Can general trends across individuals be determined without revealing information about individuals? l Possible threats: - Combine collections of data and infer information that is private l Disease information from prescription data l Military Action from Pizza delivery to pentagon l Need to protect - the associations and correlations between the data that are sensitive or private l Privacy constraints processing - The data, but give out the associations l Privacy preserving data mining

8. 8 Some Directions and Challenges for Data and Applications Security - I l Secure semantic web technologies - How do you securely integrate numerous and heterogeneous data sources on the web and otherwise l Secure Dependable Information Management - Integrating Security, Real-time Processing and Fault Tolerance l Secure Sensor Information Management - Fusing and managing data/information from distributed and autonomous sensors l Data Sharing vs. Privacy - Sharing data and at the same time maintaining Confidentiality and Privacy

9. 9 Some Directions and Challenges for Data and Applications Security - II l Data mining and knowledge discovery for intrusion detection - Real-time data mining l Secure knowledge management - Protect the assets and intellectual property of an organization l Information assurance, Infrastructure protection, Access Control - Insider cyber-threat analysis, Protecting national databases, Role-based access control for emerging applications l Security for emerging applications - Geospatial, Biomedical, E-Commerce, etc. l Other Directions - Trust and Economics, Trust Management/Negotiation, Secure Peer-to-peer computing,